CVE-2026-4173

A flaw has been found in CodePhiliaX Chat2DB up to 0.3.7. This vulnerability affects the function exportTable/exportTableColumnComment/exportView/exportProcedure/exportTriggers/exportTrigger/updateProcedure of the file DMDBManage.java of the component Database Export Handler. This manipulation causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-74
• CWE-89

• https://github.com/AnalogyC0de/public_exp/issues/21
• https://vuldb.com/?ctiid.351080
• https://vuldb.com/?id.351080
• https://vuldb.com/?submit.769775

Published

Mar 16, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41723VMware Cloud Foundation Operations contains multiple stored …8
• CVE-2026-41724VMware Cloud Foundation Operations contains multiple stored …5.4
• CVE-2026-41726When an application opts into DelegatingDeserializer, a prod…6.5
• CVE-2026-41727Spring Kafka's retry topic infrastructure did not sufficient…6.5
• CVE-2026-41728Spring Data REST's JSON Patch (application/json-patch+json) …7.5
• CVE-2026-41729Spring Data REST is vulnerable to SpEL expression injection …8.1
• CVE-2026-41730Spring Data REST serializes the full exception cause chain i…5.3
• CVE-2026-41731JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderM…8.1
• CVE-2026-41732JsonPulsarHeaderMapper matched type headers against trusted …8.1
• CVE-2026-4174A vulnerability has been found in Radare2 5.9.9. This issue …3.3
• CVE-2026-4175A vulnerability was determined in Aureus ERP up to 1.3.0-BET…5.1
• CVE-2026-4176Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 befo…9.8